
North Korea’s state-sponsored advanced persistent threat (APT) group, Lazarus, known for its cyber espionage and financial fraud activities, has launched a new impersonation scam. This time, the group is posing as GitHub developers and recruiters, targeting a limited group of tech employees in social engineering attacks. Their objective is to spread malware through malicious node package manager (npm) dependencies, poisoning









